Multiple Intel Products CVE-2018-3655 Local Privilege Escalation Vulnerability

Bugtraq ID:	105793
Class:	Design Error
CVE:	CVE-2018-3655
Remote:	No
Local:	Yes
Published:	Sep 11 2018 12:00AM
Updated:	Sep 11 2018 12:00AM
Credit:	Dmitry Sklyarov and Maxim Goryachy from Positive Technologies
Vulnerable:	Intel Trusted Execution Engine 3.1.50.2222 Intel Trusted Execution Engine 3.0 Intel Server Platform Services Firmware SPS_SoC-X_04.00.04.0 Intel Server Platform Services Firmware SPS_SoC-A_04.00.04.1 Intel Server Platform Services Firmware SPS_E5_04.00.04.340. Intel Converged Security Management Engine Firmware 11.8.50.3399 Intel Converged Security Management Engine Firmware 11.21.50.1400 Intel Converged Security Management Engine Firmware 11.20 Intel Converged Security Management Engine Firmware 11.11.50.1402 Intel Converged Security Management Engine Firmware 11.10 Intel Converged Security Management Engine Firmware 11.0
Not Vulnerable:	Intel Trusted Execution Engine 3.1.55 Intel Server Platform Services Firmware SPS_SoC-A_04.00.04.1 Intel Server Platform Services Firmware SPS_SoC-A_04.00.04.0 Intel Server Platform Services Firmware SPS_E5_04.00.04.381. Intel Converged Security Management Engine Firmware 11.21.55 Intel Converged Security Management Engine Firmware 11.11.55 Intel Converged Security Management Engine Firmware 11.8.55

Multiple Intel Products CVE-2018-3655 Local Privilege Escalation Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Multiple Intel Products CVE-2018-3655 Local Privilege Escalation Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.